On Wed, 30 Sep 2009, Nigel Kukard wrote:
   Just ignore it, it is there to support Quotas if you enable the module.
   You created the tables more than likely using the howto, you could of
   only used the schema files you needed if you wanted  :)

   >
   > my postfix main .cf has ...
   > smtpd_helo_restrictions =
   >         permit_mynetworks,
   >         reject_invalid_hostname,
   >         check_helo_access hash:/etc/postfix/helo_access,
   >         permit
   > smtpd_recipient_restrictions =
   >         permit_sasl_authenticated,
   >         permit_mynetworks,
   >         reject_unauth_destination,
   >         reject_rbl_client zen.spamhaus.org,
   >         reject_rbl_client bl.spamcop.net,
   >         reject_rbl_client psbl.surriel.com,
   >         check_policy_service inet:127.0.0.1:10031,
   >         permit
   > smtpd_end_of_data_restrictions = check_policy_service inet:127.0.0.1:10031
   >   
   
   Well, there is more than likely your problem .... you are permitting
   sasl authenticated and mynetworks BEFORE your policy check. If the mail
   is from either of these two, its not going to get the the policy check
   because you've already permitted it.
   


AH, ok.  Thanks for the amavis clarification, now it makes sense :)  
Regarding the postfix/main.cf:smtpd_recipient_restrictions
   
If I am just using the queue module for outbound throttling,
and wish to enforce smtp_auth for senders and have this counted
for the hourly quota, where should the check_policy go to ensure
a safe(no open relay) config?  If check_policy is first, will
smtp_auth be enforced or bypassed? 

thanks again S 
_______________________________________________
Users mailing list
[email protected]
http://lists.policyd.org/mailman/listinfo/users

Reply via email to